this reminds me of Ian Goodfellow's adversarial CNN training talk a few years back.